Search results

🔴 [CRITICAL] Replace unwrap()/expect() with proper error handling

Status: Open.

#13 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟡 [HIGH] Add certificate pinning for Sigstore endpoints

Status: Open.

#12 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟡 [HIGH] Add file permission checks for token storage (enforce 0600)

Status: Open.

#10 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟡 [HIGH] Add time synchronization checks before certificate validation

Status: Open.

#8 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟡 [HIGH] Add fuzz testing for signature parsing/validation logic

Status: Open.

#7 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟢 [MEDIUM] Add rate limiting for OIDC/Fulcio endpoint abuse prevention

Status: Open.

#6 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟢 [MEDIUM] Add audit logging for all signing operations

Status: Open.

#5 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025

🟢 [LOW] Add metrics for failed signature validations and signing attempts

Status: Open.

#3 In pulseengine/wsc;

· avrabe opened on Nov 2, 2025